Colin Roberts
@chrober390 followers17 downloads2 copies1 like55 views
1 detection
Filters
Last updated
All Time
Detection languages
1
Categories
1
1
Platforms
1
Products / Services
1
1
MITRE Techniques
1
1
1
1
1
Detects the modification of specific CLSID registry keys related to the .NET NGEN scheduled task. This Component Object Model (COM) hijacking technique is used by the threat actor 'Curly COMrades' to establish persistence for their 'MucorAgent' backdoor.
